
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
File: 9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json)
Hash identifier: E/8lmWROHjfTvbjVGnYMXxZHombMQJmesTZzQ3xYpJg=
Subject key identifier: FA:7E:F9:70:5D:D3:BE:4B:D2:12:77:39:19:CE:FF:DF:8B:36:7F:E3
Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Certificate serial: 0540
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
Manifest number: 0536
Signing time: Tue 24 Mar 2026 17:11:58 +0000
Manifest this update: Tue 24 Mar 2026 17:11:58 +0000
Manifest next update: Tue 31 Mar 2026 17:11:58 +0000
Files and hashes: 1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: Mh1uiDBNWUsxTwlFJ8TcZ7juxMZ4I7r7YHvEVM6fv8E=)
2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: tc5IOgRDaV8nn3PrHXqAJdCJcvDBOd27JvzglkkW4y0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1344 (0x540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Validity
Not Before: Mar 24 17:11:58 2026 GMT
Not After : Mar 31 17:11:58 2026 GMT
Subject: CN=69c2c5de-87a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:fc:b4:fb:64:53:03:96:7a:d8:f9:73:d4:
e2:a9:b6:30:ca:6d:ba:aa:be:62:41:af:c9:56:b9:
b5:86:16:bf:34:de:37:0e:53:44:6c:5e:1b:6e:e9:
29:32:de:87:ca:fc:f4:64:41:e6:c3:4e:67:72:e1:
45:07:74:3c:df:05:13:23:3a:42:27:0d:e7:79:d7:
52:dd:e0:20:a2:01:aa:69:0b:7a:cf:42:3a:a4:f6:
45:f0:90:21:be:e5:b1:3a:34:9a:f1:30:42:51:7e:
08:08:48:22:03:9d:e7:09:25:ab:bf:f3:d0:e8:c4:
e7:15:a7:de:a6:28:b9:48:30:68:ec:a3:80:33:6a:
81:d1:a7:f9:19:a8:fc:81:01:86:5c:21:1d:2d:c4:
e0:4f:03:cf:e3:b6:6c:c6:b9:c3:81:d9:2b:9a:a4:
71:1e:dc:ff:76:ff:10:cf:34:9f:7e:1d:a1:35:5f:
e4:c5:8f:62:fa:0a:a7:fe:bc:5e:5a:78:1f:6a:a0:
80:50:b4:e2:ca:c7:e5:5f:e5:31:1b:c0:1e:7f:76:
1d:1c:2f:c8:87:73:c2:db:19:6b:64:67:37:63:4f:
b8:00:8b:03:10:f0:28:a9:df:09:f9:f6:d2:1f:cc:
50:fa:38:f7:af:c6:70:a1:2d:52:e4:d0:2a:42:55:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:F9:70:5D:D3:BE:4B:D2:12:77:39:19:CE:FF:DF:8B:36:7F:E3
X509v3 Authority Key Identifier:
keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:41:78:03:56:e9:2f:66:42:66:2d:e4:60:59:13:48:fb:b2:
6d:b2:eb:2d:d5:da:3f:7b:0d:44:ad:ea:79:82:7e:f8:97:26:
19:7f:00:06:20:52:09:06:4c:e7:cb:bd:73:a4:06:53:66:a5:
84:7e:4b:29:27:a6:0a:ec:66:82:a7:8e:ea:63:b5:f2:24:1e:
d3:07:55:5c:a2:7f:b4:be:e9:aa:2b:bf:3f:7d:c9:f5:99:26:
be:aa:80:9f:7d:ab:c5:59:1d:b7:cc:e2:79:cc:09:4d:7f:67:
95:0a:53:d8:b1:67:f1:9e:34:d6:f4:f8:03:2b:ff:02:b0:04:
a1:11:64:44:ac:96:29:ea:dc:91:8d:12:5f:70:f2:b9:3f:19:
48:ff:40:6d:eb:f9:20:43:c5:b5:70:2a:2a:89:5c:b1:1d:20:
60:75:de:df:87:68:5d:46:1b:12:83:83:12:0e:14:5e:ff:2f:
2a:a3:fe:60:d3:e8:ec:46:d1:65:49:5a:1c:ac:3a:96:af:36:
a8:48:d2:74:f5:29:48:4a:f3:09:93:f0:23:8a:c3:23:0c:73:
8f:2c:39:0c:e7:43:6b:84:a2:d3:35:a1:97:bb:ff:84:5e:18:
e4:dd:d4:22:53:6e:3b:c9:8c:86:70:91:54:5e:5a:7a:6a:cf:
2f:b3:4a:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZERDYxMTAvBgNVBAUTKEY3RjlEOEE0MzU1RDY3M0I5RDRFN0YxNTVEM0E3OEU1
RTY2MEZFQTUwHhcNMjYwMzI0MTcxMTU4WhcNMjYwMzMxMTcxMTU4WjAYMRYwFAYD
VQQDEw02OWMyYzVkZS04N2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusD8tPtkUwOWetj5c9TiqbYwym26qr5iQa/JVrm1hha/NN43DlNEbF4bbukp
Mt6Hyvz0ZEHmw05ncuFFB3Q83wUTIzpCJw3neddS3eAgogGqaQt6z0I6pPZF8JAh
vuWxOjSa8TBCUX4ICEgiA53nCSWrv/PQ6MTnFafepii5SDBo7KOAM2qB0af5Gaj8
gQGGXCEdLcTgTwPP47ZsxrnDgdkrmqRxHtz/dv8QzzSffh2hNV/kxY9i+gqn/rxe
WngfaqCAULTiysflX+UxG8Aef3YdHC/Ih3PC2xlrZGc3Y0+4AIsDEPAoqd8J+fbS
H8xQ+jj3r8ZwoS1S5NAqQlU1DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPp++XBd
075L0hJ3ORnO/9+LNn/jMB8GA1UdIwQYMBaAFPf52KQ1XWc7nU5/FV06eOXmYP6l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMTYyRTAzQTNE
M0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6dWRUbjhWWFRwNDVlWmdf
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzlfbllwRFZkWnp1ZFRuOFZYVHA0NWVaZ19xVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkRENi9EMTYyRTAzQTNEM0ExMUVDQkVGNzdDNzZDNEY5QUUwMi85X25ZcERWZFp6
dWRUbjhWWFRwNDVlWmdfcVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUkF4A1bpL2ZCZi3kYFkTSPuybbLrLdXaP3sNRK3qeYJ++JcmGX8ABiBSCQZM
58u9c6QGU2alhH5LKSemCuxmgqeO6mO18iQe0wdVXKJ/tL7pqiu/P33J9ZkmvqqA
n32rxVkdt8ziecwJTX9nlQpT2LFn8Z401vT4Ayv/ArAEoRFkRKyWKerckY0SX3Dy
uT8ZSP9Abev5IEPFtXAqKolcsR0gYHXe34doXUYbEoODEg4UXv8vKqP+YNPo7EbR
ZUlaHKw6lq82qEjSdPUpSErzCZPwI4rDIwxzjyw5DOdDa4Si0zWhl7v/hF4Y5N3U
IlNuO8mMhnCRVF5aemrPL7NK/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:26 2026 by rpki-client